# NetClip - Netzwerk-Zwischenablage. Daten (verschluesselte Clips) als Bind-Mount unter ./data.
services:
  netclip:
    build: ./server
    container_name: netclip
    restart: unless-stopped
    environment:
      TZ: ${TZ:-Europe/Berlin}
      SERVER_KEY: ${SERVER_KEY:-}
      MAX_CLIP_MB: ${MAX_CLIP_MB:-1024}
      HISTORY_MAX: ${HISTORY_MAX:-100}
      HISTORY_DAYS: ${HISTORY_DAYS:-14}
      ROOM_QUOTA_MB: ${ROOM_QUOTA_MB:-5120}
      LOG_LEVEL: ${LOG_LEVEL:-INFO}
    volumes:
      - ${DATA_DIR:-./data}:/data
    ports:
      - "${BIND_ADDR:-0.0.0.0}:${PORT:-8080}:8080"

  # Optional: nginx als HTTPS-Reverse-Proxy mit selbstsigniertem Zertifikat.
  # Ein-/Ausschalten ueber COMPOSE_PROFILES=nginx in der .env
  # (leer lassen, wenn schon ein eigener Reverse-Proxy vorhanden ist).
  nginx:
    profiles: ["nginx"]
    build: ./nginx
    container_name: netclip-nginx
    restart: unless-stopped
    depends_on:
      - netclip
    environment:
      TZ: ${TZ:-Europe/Berlin}
      HTTPS_PORT: ${HTTPS_PORT:-443}
      NGINX_MAX_BODY: ${NGINX_MAX_BODY:-1100m}
      CERT_CN: ${CERT_CN:-localhost}
      CERT_SAN: ${CERT_SAN:-}
      CERT_DAYS: ${CERT_DAYS:-825}
      CERT_RENEW_DAYS: ${CERT_RENEW_DAYS:-30}
      CERT_KEY_BITS: ${CERT_KEY_BITS:-2048}
      CERT_COUNTRY: ${CERT_COUNTRY:-DE}
      CERT_STATE: ${CERT_STATE:-Bayern}
      CERT_CITY: ${CERT_CITY:-Muenchen}
      CERT_ORG: ${CERT_ORG:-NetClip}
      CERT_OU: ${CERT_OU:-IT}
    volumes:
      - ${CERT_DIR:-./certs}:/etc/nginx/certs
    ports:
      - "${HTTP_PORT:-80}:80"
      - "${HTTPS_PORT:-443}:443"